Skip to content
Sign in
4.3 Medium

CVE-2022-3336 The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow…

Description

The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Event Monster 1.2 earliest → < 1.2.0 1.2.0

Other CVEs of Event Monster

The 2 CVEs of Event Monster →
CVE-2022-3720 The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL… 7.2 High
Track this CVE